LMAOBOXLOADER[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LMAOBOXLOADER.exe
Size

56KB
MD5

70e867d9a571d786fd46b5c366e88a30
SHA1

7b324b9c0ec20b5407c05c2508ac7b1645423fc1
SHA256

24cf64ff687c46cb44b75ad082ea701453659e6c7c6f066f096ed444d16f18c3
SHA512

929ed65d624200bf1fe80a7619a99a8cc50066258b418d63536d89fa0dd3cec2f9d91431021e0df2e70c1c5127f41381c20421d7b0dd51741601c7f83b913b3d
SSDEEP

1536:nA/5yJ35VAlikQlmlHy1dtwjt+qyjjOZvz07rNcpAC:nA/YJ35VAkilHybw5+50LgrNcpA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LMAOBOXLOADER.exe

Files

LMAOBOXLOADER.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ